Logic based security policies

Security policies are of central importance for many areas of IT security. The policy describes actions that users are allowed to perform. 
The aim of the research project is to automatically generate tests for the security of concrete policies in order to find vulnerabilities in them. For this purpose, a security policy predefined by the policy administrator is used. This policy should describe the desired security level of the system - e.g. "information about user accounts cannot flow to the website". Randomised test cases are to be generated from this policy, which specifically check the consistency of the policy against these guidelines. 

The funding is start-up funding that is intended to generate preliminary work for subsequent third-party funding applications.